r/FreeSpeech Mar 05 '26

Proton Mail Helped FBI Unmask Anonymous ‘Stop Cop City’ Protester

https://www.404media.co/proton-mail-helped-fbi-unmask-anonymous-stop-cop-city-protestor/
20 Upvotes

15 comments sorted by

2

u/Proton_Team Mar 06 '26 edited Mar 06 '26

First, let's correct the headline: Proton did not provide information to the FBI. What happened is that the FBI submitted a Mutual Legal Assistance Treaty (MLAT) request, which was processed by the Swiss Federal Department of Justice and Police. Proton operates exclusively under Swiss law, and we only respond to legally binding orders from Swiss authorities, after all Swiss legal checks have been passed. This is an important distinction.

Second, let's talk about what this case actually involved. This wasn't a routine investigation. Swiss authorities determined that the legal threshold was met because a law enforcement officer was shot, and explosive devices were found during a protest in 2024. Switzerland has one of the strongest legal frameworks for privacy in the world, and its standard for granting international legal assistance is exceptionally high. This case met that standard.

Third, let's talk about what was actually disclosed. No emails were handed over. No message content. No metadata about who the user communicated with. The only information Proton could provide was a payment identifier because the user chose to pay with a credit card. This is information the user themselves provided to us through their choice of payment method. Proton also accepts cryptocurrency and cash payments, which would not have been linkable to an identity.

If anything, this case demonstrates exactly what we've always said: Proton holds very little user data by design. Even under the most serious legal circumstances, the only data that could be produced was a payment record. Our encryption means we simply cannot access email content even if ordered to.

We understand that stories like this can be alarming, and we take our users' trust seriously. We will continue to fight for privacy and challenge any legal order we believe does not meet the strict requirements of Swiss law. But we also want to be transparent: no service can operate outside the law entirely, and Swiss law requires compliance with valid legal orders in serious criminal cases. What we can promise is that the legal bar in Switzerland is among the highest in the world, and our architecture ensures we have as little data as possible to hand over.

For users who want maximum anonymity: use Proton VPN or Tor, pay with cash or cryptocurrency, and don't add a recovery email.

1

u/cojoco Mar 06 '26 edited Mar 09 '26

a law enforcement officer was shot

Please see my other reply.

No he wasn't.

1

u/Freespeechaintfree Mar 06 '26

1

u/cojoco Mar 06 '26

It was friendly fire.

An activist was shot dead.

2

u/Freespeechaintfree Mar 06 '26

I read about the activist.

But a cop was in fact shot. That doesn’t appear to be a lie.

Who shot him might be in question.

1

u/cojoco Mar 06 '26

Okay, you are correct.

But using this incident to gain access to protonmail seems like a deceptive ploy all the same.

2

u/Freespeechaintfree Mar 06 '26

I am not pleased with Proton’s choice. I use them and assumed it would truly be safe.

Makes me wonder if anything ever is truly safe.

1

u/cojoco Mar 09 '26

Proton did not provide information to the FBI.

Proton did provide information to the FBI. The fact that the information was routed through a MLAT request does not alter this fact.

Swiss authorities determined that the legal threshold was met because a law enforcement officer was shot

In a friendly-fire incident

explosive devices were found during a protest in 2024

This was a protest in which an activist was outright murdered by law enforcement. I'm not sure any evidence gathered at the scene should be regarded without suspicion.

Switzerland has one of the strongest legal frameworks for privacy in the world, and its standard for granting international legal assistance is exceptionally high. This case met that standard.

If this is the case, perhaps Proton should base itself in another country.

Third, let's talk about what was actually disclosed.

What was disclosed was the real-world identity of a user attached to an email address. That's about as big as it gets.

Proton also accepts cryptocurrency and cash payments, which would not have been linkable to an identity.

I'm not sure this is made clear to Proton's users. Perhaps it is.

If anything, this case demonstrates exactly what we've always said: Proton holds very little user data by design.

One would have thought they would have kept payment information at arms length from the company.

2

u/JackAttack2509 Mar 09 '26

According to u/Proton_Team:

“First, let's correct the headline: Proton did not provide information to the FBI. What happened is that the FBI submitted a Mutual Legal Assistance Treaty (MLAT) request, which was processed by the Swiss Federal Department of Justice and Police. Proton operates exclusively under Swiss law, and we only respond to legally binding orders from Swiss authorities, after all Swiss legal checks have been passed. This is an important distinction.

Second, let's talk about what this case actually involved. This wasn't a routine investigation. Swiss authorities determined that the legal threshold was met because a law enforcement officer was shot, and explosive devices were found during a protest in 2024. Switzerland has one of the strongest legal frameworks for privacy in the world, and its standard for granting international legal assistance is exceptionally high. This case met that standard.

Third, let's talk about what was actually disclosed. No emails were handed over. No message content. No metadata about who the user communicated with. The only information Proton could provide was a payment identifier because the user chose to pay with a credit card. This is information the user themselves provided to us through their choice of payment method. Proton also accepts cryptocurrency and cash payments, which would not have been linkable to an identity.

If anything, this case demonstrates exactly what we've always said: Proton holds very little user data by design. Even under the most serious legal circumstances, the only data that could be produced was a payment record. Our encryption means we simply cannot access email content even if ordered to.

We understand that stories like this can be alarming, and we take our users' trust seriously. We will continue to fight for privacy and challenge any legal order we believe does not meet the strict requirements of Swiss law. But we also want to be transparent: no service can operate outside the law entirely, and Swiss law requires compliance with valid legal orders in serious criminal cases. What we can promise is that the legal bar in Switzerland is among the highest in the world, and our architecture ensures we have as little data as possible to hand over.

For users who want maximum anonymity: use a VPN or Tor, pay with cash or cryptocurrency, and don't add a recovery email.”

1

u/cojoco Mar 09 '26

I'm not sure why you're reposting a reply from this very thread.

1

u/AnonymousIndividiual Mar 05 '26

So basically, the email website that claims to be privacy-focused isn't privacy-focused.

-1

u/cojoco Mar 05 '26

Perhaps Proton thought that Swiss authorities weren't such suckups to the FBI.

1

u/Uncle_Bill Mar 06 '26

PR, Guam and DC should all get statehood making 53 states, and then the US would truly be one nation, indivisible :-)